CVE-2021-27570: Missing Authentication for Critical Function

An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic...

PT-2021-17514

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions prior to 4.0.0.1 Description An issue in Emote Remote Mouse allows Authentication Bypass via Packet Replay. Remote unauthenticated users can execute arbitrary code by sending crafted UDP packets, even when passwords...

Emote RemoteMouse security vulnerability

Remote Mouse is an application. A security vulnerability exists in Emote Remote Mouse version 4.0.0.0 and prior versions, which can be exploited by an attacker who can download a malicious binary in lieu of a real update to an intermediate-run victim without SSL errors or warnings...

PT-2021-17516

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions prior to 4.0.0.1 Description An issue was discovered where the software uses cleartext HTTP to check and request updates. This allows attackers to perform a man-in-the-middle attack, enabling them to download a...

Emote RemoteMouse Access Control Vulnerability

Remote Mouse is an application. A remote mouse. A security vulnerability exists in Emote Remote Mouse version 3.015 and earlier versions, which can be exploited by an attacker to shut down any running process by sending the process name in a special packet. This message is sent in clear text and ...

PT-2021-17511

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions through 4.0.0.0 Description An issue allows attackers to maximize or minimize the window of a running process by sending the process name in a crafted packet. The information is sent in cleartext and lacks...

PT-2021-17512

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions through 3.015 Description An issue allows attackers to close any running process by sending the process name in a specially crafted packet. The information is sent in cleartext and lacks authentication logic...

CVE-2021-27569: Missing Authentication for Critical Function

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize the window of a running process by sending the process name in a crafted packet. This information is sent in cleartext and is not protected by any authentication logic...

CVE-2021-27573: Missing Authorization

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Remote unauthenticated users can execute arbitrary code via crafted UDP packets with no prior authorization or authentication...

CVE-2021-27572: Authentication Bypass by Capture-replay

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur via Packet Replay. Remote unauthenticated users can execute arbitrary code via crafted UDP packets even when passwords are set...

CVE-2021-27571: Missing Authentication for Critical Function

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can retrieve recently used and running applications, their icons, and their file paths. This information is sent in cleartext and is not protected by any authentication logic...

Emote RemoteMouse security vulnerability

Remote Mouse is a remote mouse application. A security vulnerability exists in Emote Remote Mouse 4.0.0.0 and earlier versions, which can be exploited by an attacker to maximize or minimize the window of a running process by sending the process name in a crafted packet...

Emote RemoteMouse security vulnerability

Remote Mouse is an application. A remote mouse. A security vulnerability exists in Emote Remote Mouse version 4.0.0.0 and prior versions, which stems from Authentication bypass can occur via packet replay. Even if a password is set, a remote unauthenticated user can execute arbitrary code via a...

PT-2021-17515

Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions prior to 4.0.0.1 Description An issue allows remote unauthenticated users to execute arbitrary code via crafted UDP packets with no prior authorization or authentication. Recommendations For Emote Remote Mouse...

RemoteMouse 3.008 Arbitrary Remote Command Execution

""" Exploit Title: Remote Mouse 3.008 Failure to Authenticate Date: 4/9/2019 Exploit Author: 0rphon Software Link: https://www.remotemouse.net/ Version: 3.008 Tested on: Windows 10 Remote Mouse 3.008 fails to check for authenication and will execute any command any machine gives it This script po...

RemoteMouse 3.008 - Arbitrary Remote Command Execution

RemoteMouse 3.008 - Arbitrary Remote Command Execution Exploit Title: Remote Mouse 3.008 - Failure to Authenticate Date: 2019-09-04 Exploit Author: 0rphon Software Link: https://www.remotemouse.net/ Version: 3.008 Tested on: Windows 10 Remote Mouse 3.008 fails to check for authenication and will...

RemoteMouse 3.008 - Arbitrary Remote Command Execution Exploit

""" Exploit Title: Remote Mouse 3.008 Failure to Authenticate Date: 4/9/2019 Exploit Author: 0rphon Software Link: https://www.remotemouse.net/ Version: 3.008 Tested on: Windows 10 Remote Mouse 3.008 fails to check for authenication and will execute any command any machine gives it This script po...

Remote Mouse RCE

This module utilizes the Remote Mouse Server by Emote Interactive protocol to deploy a payload and run it from the server on versions use exploit/windows/misc/remote/mouserce msf undefinedmouserce show actions ...actions... msf undefinedmouserce set ACTION msf undefinedmouserce show options ...sh...

RemoteMouse 3.008 - Arbitrary Remote Command Execution

Exploit Title: Remote Mouse 3.008 - Failure to Authenticate Date: 2019-09-04 Exploit Author: 0rphon Software Link: https://www.remotemouse.net/ Version: 3.008 Tested on: Windows 10 Remote Mouse 3.008 fails to check for authenication and will execute any command any machine gives it This script po...

Remote Mouse - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Remote Mouse published at the 'play' market has multiple vulnerabilities...